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Abstract. We study the structure of the Mordell— Weil group of elliptic curves 
over number fields of degree 2, 3, and 4. We show that if T is a group, 
then either the class of all elliptic curves over quadratic fields with torsion 
subgroup T is empty, or it contains curves of rank as well as curves of 
positive rank. We prove a similar but slightly weaker result for cubic and 
quartic fields. On the other hand, we find a group T and a quartic field K 
such that among the elliptic curves over K with torsion subgroup T, there are 
curves of positive rank, but none of rank 0. We find examples of elliptic curves 
with positive rank and given torsion in many previously unknown cases. We 
also prove that all elliptic curves over quadratic fields with a point of order 
13 or 18 and all elliptic curves over quartic fields with a point of order 22 are 
isogenous to one of their Galois conjugates and, by a phenomenon that we call 
false complex multiplication, have even rank. Finally, we discuss connections 
with elliptic curves over finite fields and applications to integer factorization. 



1. Introduction 

For an elliptic curve E over a number field K, the Mordell-Weil theorem states 
that the Abelian group E(K) of Jf-rational points on E is finitely generated. The 
group E{K) is isomorphic to T © Z r , where T is the torsion subgroup and r is a 
non-negative integer called the rank of the elliptic curve. 

The aim of this paper is to study the interplay of the rank and torsion group of 
elliptic curves over quadratic, cubic, and quartic number fields. More explicitly, we 
will be interested in the following question: given a torsion group T and an elliptic 
curve E over a number field K of degree 2, 3, or 4 such that E(K) tors ~ T, what 
can we say about the rank of E(K)1 

A natural starting point is to wonder what can be said over Q. Let T be a 
possible torsion group of an elliptic curve over Q, i.e. it is one of the 15 groups from 
Mazur's torsion theorem [3D1 Theorem 8]. What can be said about the rank? The 
short answer is: nothing. For all we know, it might be 0, it might be positive, it 
might be even, or it might be odd. As we will later show, this is in stark contrast 
with what happens over number fields. Note that already in |15] torsion groups T 
and number fields K are given such that every elliptic curve over K with torsion T 
has rank 0. 

We start by examining a very basic question: how many points can an elliptic 
curve have over a quadratic, cubic, or quartic field and what group structure can 
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these points have? As there exist elliptic curves with infinitely many points over Q, 
it is clear that an elliptic curve can possibly have infinitely many points over any 
number field. So, this question is closely related to determining for which finite 
groups T there exists an elliptic curve over a field of degree 2, 3, or 4 with torsion T 
and rank 0. 

Over Q, the answer to this question is known by Mazur's torsion theorem [201 
Theorem 8]; it is an easy exercise to find an elliptic curve with fixed torsion and 
rank over Q. An elliptic curve over Q has 1, 10, 12, 16, or infinitely many 
rational points. 

We prove a similar result over all the quadratic fields using a theorem of Kami- 
enny, Kenku, and Momose P2J Theorem 3.1], jTSJ Theorem (0.1)], which tells us 
which groups appear as torsion of elliptic curves over quadratic fields. We find, for 
each of these torsion groups, an elliptic curve over some quadratic field having that 
particular torsion group and rank 0. 

Note that if one fixes a number field and not just the degree, the situation is a 
bit different. Mazur and Rubin [211 Theorem 1.1] have proved that for each number 
field K there exists an elliptic curve over K such that the rank of E(K) is 0. A 
natural question is whether the following generalization is true: if T is a group 
that appears as a torsion group of an elliptic curve over K, does there exist some 
elliptic curve with torsion T and rank 0? We prove that the answer is no, by giving 
an example of a quartic field K such that every elliptic curve with torsion Z/15Z 
over K has positive rank. 

It is known which groups appear infinitely often as a torsion group of an elliptic 
curve over a cubic field Theorem 3.4]. For each group T from this list, we find 
a curve over a cubic field with rank and torsion group T. We do the same for 
quartic fields, using the analogous result [11[ Theorem 3.6]. It is not known if any 
other groups can appear as torsion groups of elliptic curves over cubic or quartic 
fields. 

Next, we examine elliptic curves with given torsion and positive rank over fields 
of degree 2, 3, and 4. This problem has been extensively studied over Q; see 
for example [6] for a list of references and rank records with given torsion. Over 
quadratic fields Rabarison 25, Section 4] found examples of elliptic curves with 
given torsion and positive rank for all except possibly 4 torsion groups. We find 
examples of elliptic curves with positive rank unconditionally for all these groups. 

We do the same for cubic and quartic fields and find many instances of elliptic 
curves with previously unknown Mordell-Weil groups. 

When searching for elliptic curves with given torsion and positive rank, we no- 
ticed that all constructed elliptic curves with 13-torsion and 18-torsion over qua- 
dratic fields and all constructed elliptic curves with 22-torsion over quartic fields 
appeared to have even rank. In Section 0] we prove that this is not a coincidence 
and that all elliptic curves with 13-torsion and 18-torsion over quadratic fields and 
all elliptic curves with 22-torsion over quartic fields have even rank indeed. The 
explanation involves Q-curves and if-curves, where if is a quadratic field, and a 
phenomenon that we call false complex multiplication. 

In Scction[5]wc examine the connections and applications of our results to elliptic 
curves over finite fields. In the elliptic curve factoring method [19 , one looks for 
elliptic curves whose number of points over F p for p prime is likely to be smooth, 
i.e. divisible only by small primes. It is now a classical method (see [T] and [33]) to 
use elliptic curves E with large rational torsion, as the torsion injects into E(¥ p ) 
for all primes p > 3 of good reduction. This in turn makes the order of E(¥ p ) more 
likely to be smooth. 
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One can get more information about the heuristic probability of an elliptic curve 
to have smooth order if the torsion of the curve is examined over both the rationals 
and number fields of small degree. We give an explicit example of two curves such 
that the one with smaller rational torsion has smooth order more often and discuss 
the implications of this for choosing elliptic curves for factoring. 

We used Magma [3J, Pari [23], and Sage [25] for most of our computations. 

Acknowledgments. We are greatly indebted to Hendrik W. Lenstra, Jr. for ideas 
that motivated much of Section 4, including the terminology "false complex multi- 
plication" . We thank Thomas Preu for finding points of infinite order on the elliptic 
curve with torsion Z/18Z over a quadratic field mentioned in Theorem[S] 



We first examine elliptic curves over quadratic fields. By a theorem of Kamienny 
[131 Theorem 3.1], Kenku, and Momose [HI Theorem (0.1)], the following 26 groups 
can appear as a torsion group of an elliptic curve over a quadratic field: 



We used the RankBound() function in Magma and the program mwrank [5] for 
rank computations. Over quadratic fields Magma can easily prove that the rank of 
the curves we are going to list in Theorem Q] is 0, so one does not have to employ 
any tricks to check the rank that will be needed in higher degree cases. 

Note that it is easy to find examples with a torsion group that appears over Q 
and rank 0. By standard conjectures (see [5]), half of all elliptic curves should have 
rank 0. One first finds a curve E/<Q with given torsion and rank 0. Then one finds 
a squarefree d £ Z such that the quadratic twist E^ has rank 0. The curve Eq,^\ 
has rank as well, and its torsion is likely the same as that of Eq. We still give 
explicit examples, as we feel that this is in the spirit of this paper. For the rest of 
the groups, one can find infinite families of elliptic curves with given torsion in [10) 
and [23] Section 4] and then search for rank examples. 

Theorem 1. For each group T from (QP, there exists an elliptic curve over a 
guadratic field with torsion T and rank 0. 

Proof. In Table [JJ we give explicit examples of elliptic curves with rank 0. For all 
the curves listed, one checks that the rank is indeed using a 2-descent. □ 

It is known which torsion groups appear infinitely often over cubic fields [121 
Theorem 3.4]: 



There is no known example of an elliptic curve over a cubic field with a torsion 
subgroup that is not in the list ((2J), although it has not been proved that there are 
no such curves. 

As the computation of rank bounds becomes more time-consuming in the cubic 
case, we first compute the parity (assuming the Birch-Swinnerton-Dyer conjecture) 
of the rank of the elliptic curve using the RootlMumber() function in Magma and 
eliminate the curves with odd rank. 

Theorem 2. For each group T from (J2J, there exists an elliptic curve over a cubic 
field with torsion T and rank 0. 



2. Curves with prescribed torsion and rank 



(1) 



Z/mZ for 1 < to < 18, to ^ 17, 
Z/2Z © Z/2toZ for 1 < to < 6, 
Z/3Z © Z/3mZ for m = 1, 2, 
Z/4Z© Z/4Z. 



(2) 



Z/toZ for 1 < to < 20, to ^ 17, 19, 
Z/2Z © Z/2toZ for 1 < to < 7. 
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Proof. We give explicit examples in Table [5J again, one can easily check that each 
curve has rank 0. We obtained our curves from [5]. □ 

As with cubic fields, it is known which torsion groups appear infinitely often over 
quartic fields 1 1 Theorem 3.6]: 

Z/mZ for 1 < m < 24, m ^ 19, 23, 
Z/2Z © Z/2toZ for 1 < m < 9, 
Z/3Z © Z/3mZ for 1 < m < 3, 
Z/4Z ffi Z/4mZ for 1 < m < 2, 

Z/5Z® Z/5Z, 

Z/6Z © Z/6Z. 

Again it is unknown whether there exists an elliptic curve over a quartic field with 
a torsion subgroup that is not in the list ([3]). 

The computation of upper bounds on the rank of elliptic curves over quartic 
fields becomes much harder if it is done directly over the quartic field. However, 
we will use the fact that if an elliptic curve E is defined over a number field K and 
L is an extension of K of degree 2, i.e. L = K(yfd), d € K and d is not a square, 
then the rank of E(L) is the sum of the rank of E{K) and the rank of E^ d \K). 
This can reduce the computation of the rank of an elliptic curve over a quartic field 
down to the computation of two ranks over quadratic fields or four computations 
over Q. Again, we always compute the conjectural parity of the rank of the elliptic 
curve before the actual computation of the rank. 

Theorem 3. For each group T from (0) there exists an elliptic curve over a quartic 
field with torsion T and rank 0. 

Proof. We give explicit examples of such curves in Table |3] We used curves defined 
over smaller fields wherever possible. Curves that could not be obtained in such a 
way were obtained from |10) . 

Unlike in Tables [T] and [2j here the computation of the rank is usually very hard. 
We solve one example, (2, 16), in detail to give a flavor of how our curves were 
obtained. 

We start our search by looking for elliptic curves E over the rationals with torsion 
Z/2Z © Z/8Z and rank 0, where P is a point of order 8 and Q is of order 2 such 
that P and Q generate the complete torsion. Next, we search for a point R E E(Q) 
with 2R = P. There will be 4 such choices for R. We can obtain the field of 
definition of the points R by factoring the 16th division polynomial of our elliptic 
curve. There will be five factors of degree 4: one for each choice of R, and a fifth 
one that will generate the field of definition of the point Q\ satisfying 2Qi = Q 
(over the field of definition of Q\, our elliptic curve will have torsion isomorphic to 
Z/4Z © Z/8Z). Over each field K we check the conjectural parity of our starting 
elliptic curve over K. If it is odd, we eliminate the field and move to the next. If 
we get a curve E that has even rank over Q(v / rfi, VdJj), then we check the parity 
of the curves E^ dl \ E^ d2 \ E^ dl ' d ^ and eliminate the field if any of the curves have 
odd rank. If all the fields are eliminated, we move to the next elliptic curve. 

After some searching we find the elliptic curve 

y 2 = x 3 + 12974641/13176900a; 2 + 16/14641a; 

over the field Q(V~ 330, V~ 671). One can easily compute that the ranks of E 

and E(- 671 > are by 2-descent in mwrank, but proving that the other two twists, 
#(-330) and £(1871) ) have rank o 

can not be done by 2-descent. Actually, both 
curves have the 2-primary part of their Tate-Shafarevich group isomorphic to 



RANKS OF ELLIPTIC CURVES WITH PRESCRIBED TORSION OVER NUMBER FIELDS 5 

Z/4Z Z/4Z, which can be checked by doing an 8-descent in Magma. In fact, the 
Tate-Shafarevich group of £;(- 330 ) is conjecturally isomorphic to Z/12Z © Z/12Z. 
However, one can prove that the twisted curves have rank by approximating the 
L-value L(E, 1) and using Kolyvagin's result that an elliptic curve E over Q with 
L(E, 1)^0 has rank 0. We used Sage for this computation. □ 

From Theorems [TJ [2J and [3] we obtain the following result about the number of 
points of an elliptic curve over a number hclds of degree 2, 3, and 4. 

Corollary 4. (1) An elliptic curve over a quadratic field has 1, . . . , 16, 18, 
20, 24, or infinitely many points. All of the cases occur. 

(2) There exist elliptic curves over cubic fields with 1, . . . , 15, 16, 18, 20, 24, 
28, and infinitely many points. 

(3) There exist elliptic curves over quartic fields with 1, . . . , 17, 18, 20, 21, 22, 
24, 25, 27, 28, 32, 36, and infinitely many points. 

(4) Up to isomorphism, there exist only finitely many elliptic curves over cubic 
and quartic fields for which the number of points is not in these lists. 

The last part depends on Merel's theorem 22J: for all d > 1, there are only 
finitely many groups that occur as torsion subgroups of elliptic curves over number 
fields of degree d. We also note that no curves with a different number of points are 
currently known. Furthermore, we do not know whether all the listed possibilities 
occur infinitely often. 

3. Curves with prescribed torsion and positive rank 

As mentioned in the introduction, Mazur and Rubin [2TJ Theorem 1.1] proved 
that over each number field there exists an elliptic curve with rank 0. We can 
reinterpret this theorem in the following way: if we look among all elliptic curves 
over a number field K, we will find a rank curve. It is natural to ask whether 
this statement holds true if one only looks among elliptic curves satisfying some 
condition. We prove that the statement is not true if one looks only at elliptic 
curves with prescribed torsion over some fixed number field. 

Theorem 5. There is exactly one elliptic curve up to isomorphism over the quartic 
field Q(i, ^/h) having torsion subgroup Z/15Z, and it has positive rank. 

Proof. (Compare [151 Theorem 5].) Over Q(-\/5) there is exactly one curve with 
torsion Z/15Z, namely 

E : y 2 = x 3 + (281880V5 - 630315)a; + 328392630 - 146861640V5, 

and one of the points of order 15 is 

P = (315 - 132V5, 5400 - 2376V5). 

We take an explicit affine model of Xi(15), 

Xi(15): y 2 + xy + y = x 3 +x 2 , 

which can be found in [30] . and compute 

X 1 (15)(Q(v / 5)) ^Z/8Z. 

Four of the points are cusps. The other four correspond to the pairs (E,±P), 
(E,±2P), (E,±4P), (E,±7P). Over Q(VE,i), no extra points of X x (15) appear, 
so E remains the only curve with torsion Z/15Z. In addition, E acquires the point 
(-675 + 300V5, (2052v^ - 4590)i) of infinite order over Q(i, y/E). □ 
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Finding elliptic curves with high rank and prescribed torsion has a long history, 
which can be seen at the webpage [5J, where there is a list of over 50 references 
about this problem. 

Finding elliptic curves over number fields with prescribed torsion and positive 
rank has first been done by Rabarison [23], who studied elliptic curves over qua- 
dratic fields. He managed to find elliptic curves over quadratic fields with positive 
rank and torsion Z/11Z, Z/13Z, Z/14Z, Z/16Z, Z/3ZffiZ/3Z, Z/3ZffiZ/6Z, and 
Z/4Zffi Z/4Z. 

Theorem 6. There exist elliptic curves over quadratic fields whose Mordell-Weil 
groups contain Z/15Z®Z, Z/18Z©Z 2 , Z/2Z©Z/10Z©Z 4 , and Z/2ZffiZ/12ZffiZ 4 . 

Proof. We give explicit examples of such curves in Table |BJ 

Suppose E is an elliptic curve with exactly one point of order 2 over some number 
field K. Note that the 2-division polynomial of E, ^2, is of degree 3, so ip2 factors 
over K as a linear polynomial times a quadratic polynomial. This implies that there 
is exactly one quadratic extension of K over which E has full 2-torsion, which can 
easily be found (the splitting field of the quadratic factor). 

We start with elliptic curves with high rank over Q and torsion Z/10Z and 
Z/12Z over Q. Explicit examples of such curves are given in [BJ. We take such a 
curve and use the fact that it has exactly one rational 2-torsion point. We then 
apply the above method to construct elliptic curves with high rank and torsion 
Z/2Z © Z/10Z and Z/2Z © Z/12Z over some quadratic field. In this way, we find 
the two corresponding curves in Table [BJ 

To find an elliptic curve with torsion Z/15Z and positive rank, we search for 
points on Xi(15) and then from them construct elliptic curves. Among those elliptic 
curves, we sieve for the ones that have conjecturally odd rank. Then we are left 
with the problem of finding a point of infinite order on such a curve. We managed 
to find such a point by looking at small multiples of divisors of the discriminant of 
the curve. 

For elliptic curves over quadratic fields with torsion Z/18Z, the rank is always 
even, as will be shown in Theorem[9] For curves constructed from points of Xi(18) 
over quadratic fields, therefore, instead of computing the root number to find can- 
didates for curves with positive rank, we approximate the value of the L-function 
L(E, s) at s = 1; if this vanishes, then E should have rank at least 2 by the Birch 
Swinnerton-Dyer conjecture. In this way we obtain the elliptic curve in Table [B) 
The first point of infinite order was found by T. Preu using the PseudoMordellWeil- 
Group() function in Magma after a change of coordinates to simplify the Weierstrass 
equation. The second point of infinite order can be found using the action of Z[\/— 2] 
on E(K) described in Subsection 14.61 □ 

We study the same problem over cubic and quartic fields, and find many new 
examples of Mordell-Weil groups of elliptic curves. We will not give examples for 
the torsion groups T such that it is trivial to find an elliptic curve with torsion T 
and positive rank. Let us explain what we mean by "trivial" for cubic and for 
quartic fields. 

Over cubic fields, the trivial T are those that already appear as torsion groups 
of elliptic curves over Q, as well as Z/14Z and Z/18Z. Namely, let E be an elliptic 
curve over Q with positive rank and torsion Z/7Z or Z/9Z. Then over the cubic field 
generated by a root of the 2-division polynomial, E has torsion Z/14Z or Z/18Z, 
respectively. In this way, one can construct elliptic curves with Mordell-Weil groups 
Z/14Z © Z 5 and Z/18Z © Z 4 ; see [BJ. 

Over quartic fields, the trivial T are those that already occur over the rational 
numbers or a quadratic field, those of the form Z/4nZ, where Z/2nZ occurs over Q, 
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and those of the form Z/2Z © T", where T" occurs over a quadratic field and has 
exactly one element of order 2. Let E be an elliptic curve over Q with positive 
rank and torsion Z/2nZ, and let R £ E(Q) be a point such that 2R generates this 
torsion group. Then E has torsion at least Z/4nZ over the field of definition of R. 
In this way, one can construct elliptic curves with Mordell-Weil group containing 
Z/16Z © Z 6 , Z/20Z © Z 4 , and Z/24Z © Z 4 . Now let E be an elliptic curve over 
a quadratic field K with positive rank and torsion T", with T' as above. Then E 
has torsion at least Z/2Z© T" over the quartic field K(E[2]). In this way, one can 
construct elliptic curves over quartic fields with Mordell-Weil groups containing 
Z/2ZffiZ/I4ZffiZ, Z/2ZffiZ/16ZffiZ, Z/2ZffiZ/18ZffiZ 2 , and Z/6Z©Z/6ZeZ 6 . 
(See [13] for an example of an elliptic curve with Mordell-Weil group containing 



Z/3Z © Z/6Z © Z 6 over Q(y/^3).) 



Theorem 7. There exist elliptic curves over cubic fields whose Mordell-Weil groups 
contain Z/IIZffiZ 2 , Z/13Z0Z, Z/15Z0Z, Z/16Z0Z, Z/20Z©Z, Z/2Z©Z/10Z©Z, 
Z/2Z © Z/I2Z © Z and Z/2Z © Z/I4Z © Z. 

Proof. We give explicit examples of such curves in Table [5] For torsion group 
Z/11Z, we search through the curves constructed in |12) . and quickly find a rank 
two curve among the smallest cases. For the other torsion groups, we construct 
elliptic curves with given torsion using [9], sieve for elliptic curve with conjecturally 
odd (and thus positive) rank, and then find points on the curves obtained. □ 

Theorem 8. There exist elliptic curves over quartic fields whose Mordell-Weil 
groups contain Z/17Z © Z, Z/21Z © Z, Z/3Z © Z/9Z © Z, Z/4Z © Z/8Z © Z, and 
Z/5ZffiZ/5ZffiZ. 

Proof. Explicit examples of such curves are given in Table [5] We obtain our curves 
from JU] and use the same strategy as in Theorem [7] to obtain points of infinite 
order on them. □ 

From the results in this section, we can draw the following conclusion. Let d < 4, 
and let T be a group that occurs infinitely often as the torsion group of an elliptic 
curve over a number field of degree d. Then there exists an elliptic curve with 
positive rank and torsion T over a number field of degree d, except possibly for 
d = 4 and T = Z/22Z. 



In this section we describe a phenomenon that, for an elliptic curve E over 
a quadratic field L having torsion Z/I3Z, Z/16Z, or Z/18Z, gives E(L) a module 
structure over the ring Z[£]/(< 2 — a) for some a £ Z. We say that E has false complex 
multiplication by Q[<]/(f 2 — a); a precise definition of false complex multiplication 
will be given in Subsection 14.11 A similar phenomenon occurs for elliptic curves 
with torsion Z/22Z over quartic fields. 

Theorem 9. Let E be an elliptic curve over a number field L. 

(1) If [L : Q] = 2 and E has a rational point of order 13, then L is real and E 
has false complex multiplication by Q(\/— T). 

(2) If [L : Q] = 2 and E has a rational point of order 16, then E has false 
complex multiplication by Q x Q. 

(3) If [L : Q] = 2 and E has a rational point of order 18, then L is real and E 
has false complex multiplication by Q(\/— 2). 

(4) If [L : Q] = 4 and E has a rational point of order 22, then L has a 
quadratic subfield K such that E is a K-curve over L with false complex 
multiplication by Q(\/— 2). 




4. False complex multiplication 



8 JOHAN BOSMAN, PETER BRUIN, ANDREJ DUJELLA, AND FILIP NAJMAN 

Corollary 10. Any elliptic curve over a quadratic number field with a point of 
order 13 or order 18, as well as any elliptic curve over a quartic number field with 
a point of order 22, has even rank. 

Theorem 11. Let E be an elliptic curve defined over a quadratic field L with a 
point of order n = 13 or 16, and let a be the generator o/Gal(L/Q). Then 

(1) E is L-isomorphic to E a ' . 

(2) E has a quadratic twist (by an element d o/Ol) that is defined over Q. 
For any such d, the curve E^ has an n-isogeny defined over Q. 

4.1. Preliminaries. Let L/K be a finite Galois extension of number fields, and 
let E be an elliptic curve over L. Let ~Res L / K denote the Weil restriction functor. 
We let B denote the Abelian variety 

B = Rcs L / K E 

of dimension [L : K] over K. It is known that the base change Bl of B to L is 
given by 

bl - n ° e - 

a£Gnl(L/K) 

From this we get an isomorphism 

End L Bl — Hom t (°E, T E) . 

a,reGnl(L/K) 

where the multiplication on the left-hand side corresponds to "matrix multiplica- 
tion" on the right-hand side. Taking Galois invariants, we get an isomorphism 

End K B~ Kom L (°E,E), 

aeGa,l(L/K) 

where the multiplication on the right-hand side is the bilinear extension of the maps 

Hom^E, E) x Uom( T E, E) — > Eom( aT E, E) 
(fj,, v) i — > fio V 

Definition. Let L/K be a finite Galois extension of number fields. A K-curve 
over L is an elliptic curve E over L that is isogenous to its Galois conjugates "E 
for all a G Gal(L/A"). 

Let £ be a if-curve over L, and write Re — Q ®i End^ E; this is either Q or 
an imaginary quadratic field. Then Hovul^E, E) is a one-dimensional i?E-vector 
space for all a € G&1(L/K), and hence Q (g>z End/f (Res L /^ E) is an i?^-vector 
space of dimension [L : K]. 

In the sequel, we will only be interested in the case where L is a quadratic 
extension of K . For this we introduce the following terminology. 

Definition. Let L be a number field, let E be an elliptic curve over L, and let F be 
an etale Q-algebra of degree 2. We say that E has false complex multiplication by F 
if there exists a subfield K C L with [L : K] = 2 such that Q ® End^ (Res^ / K E) 
contains a Q-algebra isomorphic to F . 

Remarks. Let E, L, F, and K be as in the above definition. 

(1) An elliptic curve E over a number field L has false complex multiplication 
if and only if E has complex multiplication or there is a subfield K C L 
with [L : K] = 2 such that E is a if-curve. 
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(2) Note that F is either Q X Q or a quadratic field. If E is an elliptic curve 
over L with false complex multiplication by F, then the Q-vector space 

Q ®z E{L) ~ Q ®i (Res L/A - E){K) 

has a natural F-module structure. If F is a field, this implies that the 
finitely generated Abelian group E(L) has even rank. 

4.2. Families of curves with false complex multiplication constructed 
from involutions on modular curves. Let n be a positive integer, and let 
Yo(n) be the (coarse) modular curve over Q classifying elliptic curves with a cyclic 
subgroup of order n, i.e. a subgroup scheme that is locally isomorphic to Z/nZ in 
the etale topology. Let Y be a smooth affine curve over Q, let E be an elliptic 
curve over Y, and let G be a cyclic subgroup of order n in E. Then we obtain a 
morphism 

Y -> Y (n). 

We assume that this morphism is finite. Furthermore, we suppose given an involu- 
tion 

l:Y^Y 

that lifts the automorphism w n of Yo (n) . 

Pulling back E via i gives a second elliptic curve i*E over Y . By the assumption 
that i lifts w n , we have 

l*E ~ £/G. 

Symmetrically, is equipped with the cyclic subgroup i*G of order n, which 
corresponds to the subgroup E[n]/G of E/G; we have 

(l*E)/(l*G)~E. 

In view of this, we may fix an isogeny 

fi: l*E ->■ E 

with kernel i*G. Since the morphism Y — > Yo(n) is finite and therefore dominant, 
we have Auty E = {±1}, and so /i is unique up to sign. Pulling back /i via l and 
using the canonical isomorphism l*l*E ~ E, we get a second isogeny 

L*fi: E^ l* E 

with kernel G. Composing these, we get an endomorphism 
(4) d = )io t*fjL G Endy E. 

Note that this endomorphism does not depend on the choice of /i. Its kernel is 
E[n], so again using Auty E = {±1}, we conclude that 

a = ±n. 

In particular, up to sign, t*fi is the dual isogeny of \i. 

Let U be the complement of the scheme of fixed points of the involution i on Y, 
let U/i denote the quotient, and let Hesu/m/^ denote the Weil restriction functor 
from [/-schemes to ([//(-)-schemes [51 Section 7.6]. We write 

B = Resu/^u/^ E. 

Because the quotient map U —> U/i is etale of degree 2, this is an Abelian scheme 
of relative dimension 2 over U/i. As in Subsection 14.11 we have 

Endu/, B ~ End^ L ® Hom[r(t*S, E). 

We get an injective homomorphism 

1[t]/(t 2 -a)>-> End u/L B 
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mapping t to the cndomorphism of B corresponding to fx € Homy (i* E , E) under 
the above isomorphism. 

Now let K be a number field. Specializing to arbitrary if-points of U/i gives a 
construction of if-curves, as follows. Let u e (U/l)(K). Suppose that the inverse 
image v of u in U is irreducible, so it is of the form SpecL with L a quadratic 
extension of L. Then the fiber E v is a X-curve over L and has false complex 
multiplication by Q[i]/(i 2 — a). In particular, if a is not a square, then E V {L) has 
even rank. 

4.3. The modular curves Yi(n). Let n > 6 be an integer. The affinc modular 
curve Yi (n) classifying elliptic curves with a point of order n can be described as 

Yi(n) ~ Spcc(Z[s, t, 1/n, l/A]/(0„)), 

where 

A = -s 4 i 3 (t - l) 5 (s(s + Aft 2 - s(2s 2 + 5s + 20)i + (s - l) 3 ) 

and where 

K e z[«, t] 

is an irreducible polynomial depending on n. The universal elliptic curve over Yi (n) 
is given by the Weierstrass equation 

£ : y 2 + (1 + (t - l)s)zy + i(i - l)sy = x 3 + t(t - l)sx 2 

with the distinguished point (0,0), and <f> n is such that its vanishing is equivalent 
to the condition that (0,0) is of order n. 

Since the polynomial (f> n is rather complicated for all but the smallest values 
of n, it pays to introduce a change of variables giving a simpler-looking equation 
for Yi(n). The new variables are called u and v in the examples below. 

4.4. Torsion subgroup Z/13Z. We consider the modular curve Yi(13) over Q. 
Its compactification Xi(13) has genus 2 and in particular is hyperelliptic. There 
are six rational cusps and six cusps with field of definition Q(Ci3 + Cia 1 )- 

Let (E, P) denote the universal pair of an elliptic curve and a point of order 13 
over Yi(13). The diamond automorphism 

t =<5) = <-5) 

of Yi(13) is an involution since 5 2 is the identity element of (Z/13Z) X /{±1}. It is 
a lift of the "Atkin-Lehner involution wi" on X(l) (i.e. the identity). We note that 
the fixed points of i lie outside the cusps. 

Pulling back (E,P) via t yields a second pair l*(E,P), and the definition of l 
gives an isomorphism 

»:i*(E,P)^(E,5P) 
over Yi(13). Pulling back \i via t gives another isomorphism 

ffi: (E,P) l*(E,5P). 

We have 

H o t > : (E, P) (E, 5 2 P) = (E, -P). 
This implies that, in the notation introduced above, we have 

a = —1, 

so the Abelian variety B has the property that 

EndB ~ Z[\/^l]. 
In coordinates, the situation looks as follows. We have 

013 = t 3 - (s 4 + 5s 3 + 9s 2 + 4s + 2)t 2 + (s 3 + 6s 2 + 3s + l)t + s 3 . 
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We use the change of variables 

u = l/(s + 1) + 1), v = u A (t - 1) + u 2 ; 

V + u v — u 2 
S = —. -TT — 1, t = h 1. 

u(u + ly u 4 

The modular curve Yi(13) is isomorphic to the affine curve given by 

v 2 - (u 3 + 2u 2 + u+ l)v + u 2 (u + 1) = 0, 

u(u + l)(u 3 - u 2 - 4u - 1) ^ 0. 

The six rational cusps are given by it = 0, u = — 1, and u = oo; the six cusps 
defined over Q(Ci3 + C13 1 ) are given by u 3 — u 2 — 4w — 1 = 0. 

The hyperelliptic involution sends (u, v) to (u, u 3 +2u 2 +u+l— v). A computation 
using the moduli interpretation shows that the hyperelliptic involution coincides 
with (5) = (-5). 

The specialization construction explained in Subsection 14.21 gives a family of (in- 
curves. Let eg Q \ {0, — 1}. The inverse image of the point defined by c under the 
map 

u: Yi(13) -J- SpecQ[u, l/(u(u+ l){u 3 - u 2 - 4u - 1))] 

is the spectrum of the quadratic Q-algebra 

L = Q[v]/(v 2 - (c 3 + 2c 2 + c+ l)v + c 2 (c + 1)). 

Since Yi(13) does not have any Q-rational points, L is a field, and we obtain an 
elliptic curve over L with false complex multiplication by Q(-\/— 1). 

In fact, any elliptic curve over a quadratic field with a point of order 13 comes 
from the above construction, as we will now show. 

Lemma 12. Let X be a proper, smooth, geometrically connected curve of genus 2 
over a field k, let l be the hyperelliptic involution on X , let K be a canonical divisor 
on X, and let J be the Jacobian of X. 

(1) An effective divisor of degree 2 on X is in the canonical linear equivalence 
class if and only it is the pull-back of a k-rational point of X/l. 

(2) Let S be a finite set of closed points of X such that every k-point of J is of 
the form [D 1 — K] , where D' is an effective divisor of degree 2 with support 
in S. Let D be an effective divisor of degree 2 on X . Then either D has 
support in S , or D lies in the canonical linear equivalence class. 

Proof. The first part is well known. For the second part, let D be an effective divisor 
of degree 2. By assumption, D is linearly equivalent to an effective divisor D' with 
support in S. If D is not in the canonical linear equivalence class, then the complete 
linear system \D\ has dimension 0, so D = D' . □ 

Lemma 13. Let Ji(13) denote the Jacobian of Xi(13), and let K be a canonical 
divisor on Xi(13). The group Ji(13)(Q) is isomorphic to Z/19Z, and every element 
of Ji(13)(Q) is of the form [D — K] with D an effective divisor of degree 2 supported 
on the cusps of Xi(13). 

Proof. Two distinct effective divisors of degree 2 on a curve of genus 2 are linearly 
equivalent if and only if they are both in the canonical linear equivalence class. The 
set of effective divisors of degree 2 supported at the cusps, which has ( 6+ 2 _1 ) = 21 
elements, therefore splits up into the canonical linear equivalence class consisting 
of 3 divisors (defined concretely by u = 0, u = — 1, and u = 00) and 18 linear 
equivalence classes consisting of a single divisor. We deduce that the effective 
divisors of degree 2 supported at the cusps yield 19 rational points of Ji(13). 
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One can show by a 2-descent (implemented for instance in Magma that Ji(13) 
has trivial 2-Selmer group. It follows that Ji(13)(Q) is a finite group of odd or- 
der. Together with the fact that Ji(13) has good reduction at 2, this implies that 
Ji(13)(Q) injects into Ji(13)(F2). One computes the zeta function of Xi(13)f 2 as 

_ l + 3t + 5t 2 +6t 3 +4t 4 
Z( Xl (13V 2 ,i) (1 _ t)(1 _ 2t) • 

Setting t = 1 in the numerator, we see that Ji(13) has 19 points over F2. This 
proves that Ji(13) has no other rational points than the 19 found above. □ 

Proof of Theorem\@$]ty . Let (E,P) be a pair consisting of an elliptic curve and a 
point of order 13 over a quadratic field L. Let y be the closed point of Yi(13) 
defined by (E, P). Since Yi(13) has no Q-rational points, the residue field of y is a 
quadratic extension of Q, so y defines a divisor of degree 2 on Yi(13). Combining 
Lemma [T31 and Lemma [T2l with S equal to the set of cusps of Xi(13), we see that y 
lies in the canonical linear equivalence class. This implies that there is a Q-rational 
point x € Yi(13)/t such that y is the inverse image of x under the quotient map 
Yi(13) — > Yi(13)/i. Therefore (E,P) arises from the specialization construction 
described above, and E has false complex multiplication by Q(V — 1). 
The modular curve Yi(13) can be rewritten in the form 

v 2 = f(u) = — 2u 5 + u 4 - 2u 3 + 6u 2 - Au + 1, 

u(u - l)(u 3 - 4u 2 + u + 1) ^ 0. 

The description of the points on Yi(13) implies that for y = (u,v) € Yi(13)(L), u 
is Q-rational. As f{u) > for all u £ R, we conclude that v is a square root of a 
positive rational number, and hence v is defined over a real quadratic field. □ 

4.5. The modular curve Yi(16) and quadratic Q-curves with odd rank. 

As noted in Subsection 14.21 a Q-curve has even rank if the value a defined in (0]) is 
not a square. In this subsection we show that for every elliptic curve defined over 
a quadratic field with torsion Z/16Z, the value a is equal to 1. As opposed to the 
Z/13Z or Z/18Z cases, there do exist elliptic curves with torsion Z/16Z and odd 
rank. 

Let (E, P) denote the universal pair consisting of an elliptic curve and a point 
of order 16 over Yi(16). The diamond automorphism 

i={7) = (-7) 

of Yi(16) is an involution since 7 2 is the identity element in (Z/16Z) X . As in 
Subsection 14.41 t is a lift of Wi onX(l). 

Pulling back (E,P) via 1 yields a second pair i*(E,P), and the definition of 1 
gives an isomorphism 

fi: l*{E,P) (EJP) 
over Yi(16). Pulling back fj, via 1 gives another isomorphism 

l*h: (E,P) l*(E,7P). 

We have 

M o t >: (E,P)^(E,7 2 P) = (E,P). 
This implies that we have a = 1, so the Abelian variety B has the property that 

End B~ZxZ. 

Using this construction, we can in fact obtain Q-curves with odd rank: the elliptic 
curve 



E:y 2 + (121 + 39V10)x2/- (3510+ 1107V10)y = x A - (3510 + 1107VlO)aT, 
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taken from [25] Theoreme 10] has Mordell-Weil group 

E(Q(Vw)) ~ z/iezez. 

It is also a Q-curve, isomorphic to E a . 

As in the previous subsections, we prove that all elliptic curves with torsion 
Z/16Z are Q-curves. In fact, as with curves having torsion Z/13Z, they will be 
isomorphic, not just isogenous, to their Galois conjugates. 

Lemma 14. Let Ji(16) denote the Jacobian of Xi(16), and let K be a canonical 
divisor on Xi(18). The group Ji(16)(Q) is isomorphic to Z/2Z®Z/10Z, and every 
element of Ji(16)(Q) is of the form [D — K] with D an effective divisor of degree 2 
supported on the cusps o/Xi(16). 

Proof. This is again similar to Lemma Q2] The set of effective divisors of degree 2 
supported at the cusps has ( 6+ 2 _1 ) + 2 = 23 elements and splits up into the canon- 
ical linear equivalence class, consisting of 4 divisors (with support in the cusps 
corresponding to 8-gons and 16-gons), and 19 linear equivalence classes consisting 
of a single divisor. We deduce that the effective divisors of degree 2 supported at 
the cusps yield 20 rational points of Ji(16). Moreover, there are at least three such 
divisors D (with support in the cusps corresponding to 2-, 4-, and 8-gons) such that 
[D - K] has order 2. 

By 2-descent, we find that the 2-Selmer group of Ji(16) has dimension 2 over F2. 
Since we have three distinct points of order 2, we conclude that Ji(16)(Q) is finite. 
As in the proof of Lemma [T51 we use the fact that reduction modulo 3 is injective 
on torsion. The zeta function of Xi(16) over F3 is 

l + 2i + 2t 2 + 6i 3 + 9i 4 

z(Xi(16)f 3 ,£) = 



(l-*)(l-3t) 

Setting t = 1 in the numerator, we see that Ji(16) has 20 points over F3. This 
proves that Ji(16) has no other rational points than the 20 found above. The only 
possible group structure is Z/2Z© Z/10Z in view of the three 2-torsion points. □ 

Proof of Theorem\3^. This is proved in the same way as Theorem [^JJTJ) , using 
Lemma [14] instead of Lemma [13] □ 

Proof of Theorem [771 Part ([T]) follows from Subsections 14.41 and 14.51 Since E 
and E a are isomorphic, E has to have a rational j-invariant, meaning that a twist 
EW of can be defined over Q. As E/L has an n-isogeny, so does EW/L. Let C 
be an n-cycle on E. As E and E" are isomorphic and /1 sends C a to C, one can 
see that (E,C) and (E (T ,C' T ) represent the same point on Yo(n)(L). As Yo is a 
coarse moduli space, the same point on Yo(n)(L) is also represented by (E^ d \ C"), 
where C is the corresponding n-cycle on E^ over L and {{E°)( d \{C'Y). Thus, 
one can see that C is a-invariant, and hence E^ d ' has a Gal(Q/Q)- invariant cyclic 
subgroup of order n (and hence a rational n-isogeny). □ 

4.6. Torsion subgroup Z/18Z. We consider the modular curve Yi(18) over Q. 
Its compactification Xi(18) has genus 2 and in particular is hyperelliptic. There 
are six rational cusps, four cusps with field of definition Q(Ca), and six cusps with 
field of definition Q(C 9 + (g 1 ). 

We view Yi(18) as classifying triples (E,P2,Pg) with E an an elliptic curve, Pi 
a point of order 2, and Pg a point of order 9. We define an involution 1 of Yi(18) 
by 

l(E,P 2 ,P 9 ) = (E/(P 2 ),Q 2 ,2P 9 mod (P 2 )), 
where Q 2 is the generator of the isogeny dual to the quotient map E — > E/(P 2 ). 
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We denote the universal triple over Yi(18) by (E, P 2 , Pg). The definition of 1 
gives an isogeny of degree 2: 

fi: o*(E,P 2 ,P g ) -A- (P/(P 2 ),Q 2 ,2P 9 mod (P 2 )) 

— > (E/E[2],0, 2P 9 mod E[2]) 

^>(P,0,4P 9 ). 

Pulling back \x via t gives a second isomorphism 

t>: (P,P 2 ,P 9 ) -^ t *(P,0,4P 9 ). 

We have 

/io t >: (£,P 9 ) (P,4 2 P 9 ) = (P,-2P 9 ). 
This implies that in the notation introduced above, we have 

a = -2, 

so the Abelian variety B has the property that 

EndP ~ Z[V^2}. 
In coordinates, the situation looks as follows. We have 

018 = (s 3 + 6s 2 + 9s + 1)£ 4 + (s 5 + 7s 4 + 20s 3 + 19s 2 - 8s - l)t 3 
- s 2 (s 2 + lis + 28)t 2 - s 2 (s 2 + 5s - 8)t - s 2 (s 2 - s + 1). 
We use the change of variables 

s 6 + 10s 5 + 38s 4 + 68s 3 + 55s 2 + 14s + 1 



s(s + 1) 



(i 



lis 7 + 53s 6 + 135s 5 + 176s 4 + 88s 3 - 16s 2 - 12s - 1 



s(s + 1) 



s 6 + 13s 5 + 63s 4 + 132s 3 + 116s 2 + 26s 2s 5 + 3s 4 - 8s 3 - 17s 2 - 5s 

(s~Trj~ 6 t+ (J+W 6 ' 

(u 2 - l)v - u 5 - 2u 4 - 2u 3 + u 2 + u 



s: s = it — v, t 



u 3 + 3u 2 — 1 

The modular curve Yi(18) is isomorphic to the afnne curve given by 

v 2 - (u 3 + 2u 2 + 3u + l)v + u{u + l) 2 = 0, 

u{u + l)(u 2 + u + l){u 3 + 3u 2 -1)^0. 

The hyperelliptic involution sends (u, v) to (u, u 3 + 2u 2 + '3u + l — v). A computation 
using the moduli interpretation shows that the hyperelliptic involution coincides 
with the involution l defined above. 

By specialization we obtain a family of elliptic curves with false complex multi- 
plication by Q(^/^2). 

Lemma 15. Let Ji(18) denote the Jacobian of Xi(18), and let K be a canonical 
divisor on Xi(18). The group Ji(18)(Q) is isomorphic to Z/18Z, and every element 
of Ji(18)(Q) is of the form [D — K] with D an effective divisor of degree 2 supported 
on the cusps of Xi(18). 

Proof. This is proved in the same way as Lemma [T5J The set of effective divisors 
of degree 2 supported at the cusps has ( 6+ 2 ~ 1 ) + 4 = 25 elements and splits up 
into the canonical linear equivalence class, consisting of 5 divisors, and 20 linear 
equivalence classes consisting of a single divisor. We deduce that the effective 
divisors of degree 2 supported at the cusps yield 21 rational points of Ji(18). 

Again by 2-descent, Ji(18) has trivial 2-Sclmer group, so Ji(18)(Q) is finite. In 
general, if A is an Abelian variety over a number field K and p \ p is a prime of 
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good reduction with e(p/p) < p — 1, then reduction modulo p is injective on the 
torsion of A(K P ); see for instance [T7] Appendix]. Using this, we see that Ji(18)(Q) 
injects into Ji(18)(Fs). One computes the zeta function of Xi(18)f 5 as 

^(Xi(18)F„,t)- (1 _ t)(1 _ 5t) . 

Setting t = 1 in the numerator, we see that Ji(18) has 21 points over F5. This 
proves that Ji(18) has no other rational points than the 21 found above. □ 

Proof of Theorem\9§3$ . In the same way as in Theorem OH]), one proves that E has 
false complex multiplication by Q(\/— 2), using Lemma 1151 instead of Lemma 1131 
As in the proof of Theorem [SHI]) , we conclude that any quadratic point on Yi(18) 
is the inverse image under the quotient map Yi(18) — > Yi(18)/t of a Q-rational 
point on Yi(18)/i. 

The modular curve Yi(18) can be rewritten as 

v 2 = f(u) = u 6 + 2u 5 + 5u 4 + 10m 3 + 10u 2 + 4u + 1, 

u(u + l)(u 2 + u + l){u 2 - 3u - 1) = 0. 

We conclude that for any quadratic point y — (u,v) e Yi(18), u has to be du- 
rational, and since f(u) > for all u € K, this implies that v is a square root of a 
positive rational number and hence an element of a real quadratic field. □ 

4.7. Torsion subgroup Z/22Z. In this subsection, we will prove Theorem [HMD) . 
Throughout this subsection we will denote the modular curve Xi(22) by C and its 
Jacobian by J. The genus of C is equal to 6; this fact will play a crucial role. 

Unless stated otherwise, curves are assumed to be complete, smooth, and geo- 
metrically integral. 

To prove Theorem[ni|I]), we will characterize the points on Yi(22) that are defined 
over quartic number fields. One way of finding quartic points on Yi(22) is by 
choosing a degree 4 morphism C — > P 1 . The fibers of rational points then consist 
of points defined over number fields of degree at most 4. Amongst other things, we 
will prove the following proposition. 

Proposition 16. Each non-cuspidal quartic point of C lies in a fiber of a rational 
point for some morphism C — > P 1 of degree 4. Furthermore, each non-cuspidal 
point of C that lies in such a fiber has quartic field of definition. 

Along the way we will characterize all degree 4 morphisms C — > P 1 ; the i^-curve 
property in the theorem will then follow from this characterization. 

The curve C parametrizes triples (E, P2, P11) with E a generalized elliptic curve, 
P2 a point of order 2, and Pn a point of order 11. Let us mention that C has 20 
cusps: 10 cusps defined over Q, whose moduli correspond to Neron 11-gons and 
22-gons, and 10 cusps defined over the quintic field Q(Cn + Cn 1 ); whose moduli 
correspond to Neron 1-gons and 2-gons. 

Let i be the following involution on C: 

l: [E,P 2 ,P 1X ) ^ {E/(P 2 ),Q 2 , 4P U mod (P 2 )) , 
where Q 2 is the generator of the isogeny dual to E EJ (P 2 )- 

Lemma 17. The quotient C/(t) is isomorphic to an elliptic curve with 5 rational 
points. 

Proof. Put A = Z + v^2Z, E = C/A, and P 2 = V^2/2 mod A. If P n is 1/11 ± 
4/ll\/— 2 mod A or any multiple thereof, then (E, P 2 , Pn) is a fixed point of l. 
This gives 10 fixed points; the Riemann-Hurwitz formula now implies g(C/(t)) < 
1. If there were more fixed points, then g(C / (l)) would be and thus C would 
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be hyperelliptic, which contradicts the fact that there are no elliptic curves over 
quadratic fields with a 22-torsion point. 

The 10 rational cusps of C map down to 5 rational points on C / (i). The modular 
curve C has level 22, thus the quotient C / (l) is an elliptic curve of conductor 
dividing 22. According to [SJ Table 1] there are 3 such elliptic curves; they all have 
conductor 11 and at most 5 rational points. □ 

Remark. The elliptic curve in question is in fact isomorphic to Xi(ll), but we will 
not need this in the sequel. 

A curve X that has a degree 2 morphism to an elliptic curve is called a hi- elliptic 
curve. An involution on X that gives such a morphism by dividing it out, is called 
a bi-elliptic involution. The so-called Castelnuovo-Severi inequality is useful in the 
study of bi-elliptic curves. 

Proposition 18 (Castelnuovo-Severi inequality, Theorem III. 10. 3]). Let k be 

a perfect field, and let X, Y , and Z be curves over k. Let non-constant morphisms 
Tty '■ X — > Y and nz '■ X — > Z be given, and let their degrees be m and n, respectively. 
Assume that there is no morphism X — > X' of degree > 1 through which both iry 
and ttz factor. Then the following inequality holds: 

g(X) < m-g{Y) + n-g(Z) + (m - l)(n - 1). 

Corollary 19. Let k be a perfect field, and let X be a bi-elliptic curve over k of 
genus at least 6. Then X has a unique bi-elliptic involution i. Furthermore, there 
are no non-constant morphisms X P 1 of degree less than 4, and every degree 4 
morphism X — > P 1 factors through X — > X/(l). 

Proof. If there were two bi-elliptic involutions, i and i! say, then iry ■ X — > X/(i) 
and ttz : X — > Xj (t') would contradict Proposition[TH] For the other two assertions, 
apply Proposition [TS] with ixy : X — > Xj (t) and ~kz any non-constant morphism 
X — !> P 1 of degree at most 4. □ 

So we see that the degree 4 morphisms C — ?> P 1 are in bijection with the degree 2 
morphisms C / (l) — > P 1 . 

If we identify morphisms to P 1 whenever they differ by an automorphism of P 1 , 
then a degree 2 morphism CJ (t) — > P 1 is given by a base-point-free linear system of 
divisors of degree 2 and dimension 1 on C/(i). Since C/(i) is an elliptic curve, any 
complete linear system of divisors of degree 2 is base-point- free and of dimension 1. 
These are in turn in bijection with the set Pic 2 (C) of linear equivalence classes of 
degree 2 divisors on C / (l) . An elliptic curve is its own Jacobian, so for any degree d 
the set Pic d (C) is in bijection with C / (t)(Q), which consists of 5 points. 

A quartic point on C defines a rational point on Sym C, and a morphism C — > P 1 
defines a closed immersion P 1 >— » Sym 4 C. So the 5 degree 4 morphisms C — >• P 1 
give us 5 copies of P 1 in Sym 4 C that are defined over Q. We wish to prove that all 
rational points of Sym C outside these P 1 's are supported on the cusps of C. 

Fix any point of C(Q); this gives us a morphism 

4>: Sym 4 C ^ J. 

If D is an effective divisor of degree 4 on C, then the fiber (<f){D)) is isomorphic 
to a projective space whose rational points form the complete linear system \D\ of 
effective divisors that are linearly equivalent to D. 

Lemma 20. Let k be a perfect field, and let X be a bi-elliptic curve over k of genus 
at least 6. Let D be a divisor on X of degree at most 4. Then the dimension of the 
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complete linear system \D\ of divisors satisfies the following 
dim ID I = 



1 if D is a fiber of a degree 4 morphism X 
otherwise. 



In the former case, \D\ consists of all fibers of the same degree 4 morphism X — > P 1 . 

Proof. Assume |D| has positive dimension. Let Y be any subspace of \D\ of di- 
mension 1, and let F < D be the fixed divisor of Y. Subtracting F from all 
elements of Y, we obtain a base-point-free linear system of dimension 1 and degree 
deg(D — F) and thus a morphism X — > P 1 of degree deg(Z) — F). By Corollary ITO1 
we have degD — 4 and F = 0. Since linear systems of degree less than 4 over any 
algebraic extension of k have dimension 0, it follows that dim \D\ cannot exceed 1. 
We thus have Y = \D\, and the last assertion is immediate. □ 

This lemma immediately implies that the five P^s described above are fibers 
of 4> and furthermore that outside these P 1 's the rational points of Sym 4 C map 
injectively into J(Q). It is thus interesting to know what J(Q) looks like. 

Lemma 21. The Mordell-Weil rank of J is zero. 

Proof. Each isogeny factor of J is a modular Abelian variety A f , where is a newform 
of S 2 (T 1 {N)) with N | 22. We must prove that these A f all have Mordell-Weil 
rank 0. There are two such Af: one for the unique newform of level 11 and one for 
the unique newform of level 22. For / of level 11 we have Af = Ji(ll), which is 
an elliptic curve with 5 rational points. For / of level 22, proven instances of the 
Birch-Swinnerton-Dyer Conjecture [THl Corollary 14.3] ensure us that rkA/(Q) = 
if L(f, 1) 0. Symbolic methods involving modular symbols can be used to verify 
L(f, 1) 7^ (see for instance [271 Section 3.10]); it turns out that this is indeed the 
case here. □ 

To further study the Diophantine properties of Sym 4 C and J, we will use re- 
duction modulo 3; this will enable us to prove Proposition 1161 In general, if A is 
an Abelian variety over a number field K and p | p is a prime of good reduction 
with e(p/p) < p — 1, then reduction modulo p is injective on the torsion of A(K p ): 
see for instance [T7J Appendix]. For us this means that J(Q) injects into J(¥s). 

Proof of Proposition \16l We can compute the zeta function of CV 3 , either by direct 
point counting over extensions of F3 or by expressing the Frobenius action on the 
Tate module in terms of the Hecke operator T3, and find 

Z{C ^ t] - {l-t){l-Zt) 

with 

P(t) = (1 + 1 + 3< 2 ) 2 • (1 + At + 'it 2 - 10t 3 - 29i 4 - 30i 5 + 27i 6 + 108i 7 + 81i 8 ). 

The 10 rational cusps of C reduce to distinct points of C(F 3 ). If we expand Z(Cw 3 , t) 
as a power series, then the coefficient of t d is equal to the number of effective divisors 
of degree d on CV 3 . So from 

Z(Cf 3 , t) = 1 + IQt + 55t 2 + 220i 3 + 720t 4 + 0(i 5 ) 

we can immediately read off that all points of C(F3) are cusps. The number of 
unordered n-tuples of cusps is ( 10+ ™ _1 ), which is equal to 55, 220, and 715 for 
n = 2, 3, 4, respectively. It follows that all divisors of degree 2 and 3 are supported 
on the cusps and that there are precisely 5 divisors of degree 4 that are not supported 
on the cusps. 
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We will now show that these 5 points of Sym 4 (C)(F3) are in the non-trivial fibers 
of Sym (C) — > J. This would immediately imply that all points of Sym (C)(Q) 
outside these fibers are cuspidal, because of the injectivity of Sym 4 (Q) — > J(F 3 ) 
outside these fibers. To do this, we can simply count the number of non-cuspidal 
points in the non-trivial fibers over F3. Let a morphism C — > P 1 of degree 4 be 
given. The proof of Lemma H7I implies that the 10 cusps of C are mapped to P 1 in 
fibers of 4, 4, and 2 points, respectively. Hence, in each of the 5 rational projective 
lines that we have in Sym 4 (C), there are precisely 3 points supported on the cusps. 
Over F3 these lines have #P 1 (Fa) — 4 rational points, thus each of the 5 lines has 
exactly 1 non-cuspidal point, giving us 5 points in total. □ 

Corollary 22. Each point on C with quartic field of definition maps to a point of 
C I (l) that is defined over a quadratic field. □ 

Proof of Theorem\3^. Let [E, P2, P11) be the universal elliptic curve with points 
of order 2 and 1 1 over Yi (22) . The construction in Subsection l4.2l gives us an isogeny 
(j,: l*(E, P2, P\i) — > (E, 0, 8Pn) of degree 2. From this we obtain an isomorphism 

/iotV: (E,P n ) {E,8 2 P U ) = {E,-2P 11 ). 

Let P be a point of Yi(22) defined over a quartic number field L. From the above 
it follows that there is a degree 4 morphism C^P 1 mapping P to a rational point 
and thus that P lies above a point of C/{t) defined over a quadratic number field K 
that is necessarily a subfield of L. The results from Subscction l4.2l now immediately 
imply that the elliptic curve E associated with P is a if-curve with false complex 
multiplication by Q(v— 2). □ 

5. Applications to elliptic curves over finite fields 

Finding elliptic curves with positive rank and large torsion over number fields 
is not just a curiosity. As mentioned in the introduction, elliptic curves with large 
torsion and positive rank over the rationals have long been used for factorization, 
starting with Montgomery [55] . Atkin and Morain [TJ. In this section we argue 
that examining the torsion of an elliptic curve over number fields of small degree is 
beneficial in addition to examining the rational torsion. 

A nice explicit example of the factorization of large numbers (Cunningham num- 
bers in this case) using elliptic curves over number fields of small degree can be found 
in [3]. The authors used elliptic curves over cyclotomic fields with torsion groups 
Z/3Z © Z/6Z and Z/4Z Z/4Z. Also, they tried to construct elliptic curves over 
cyclotomic fields with torsion Z/5Z © Z/5Z and Z/4Z © Z/8Z and positive rank 
(see [H 4.4 and 4.5]), but failed. Note that one can find such curves in Theorem [H 

Theorem 23. Let m and n be positive integers such that m divides n. Let E be 
an elliptic curve over Q, let p be a prime number not dividing n such that E has 
good reduction at p, and let d be a positive integer. Suppose there exists a number 
field K such that E{K) contains a subgroup isomorphic to Z/mZ©Z/nZ and such 
that K has a prime of residue characteristic p and inertia degree dividing d. Then 
E(¥ p d) contains a subgroup isomorphic to Z/mZ©Z/nZ. 

Proof. This follows from the fact that the n-torsion of E{K) reduces injectively 
modulo any prime of good reduction that does not divide n; see for example [23 
VII, Proposition 3.1]. □ 

We can apply Theorem [23] with a fixed number field K, such as the splitting 
field of E[n}. Then Chebotarev's density theorem gives a lower bound for the 
density of the set of primes p such that E(¥ p ) contains a subgroup isomorphic to 

Z/mZffiZ/nZ. 
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The relevance for the elliptic curve factoring method is as follows. One looks for 
elliptic curves over fields of small degree having a given torsion subgroup G. If E is 
such a curve, then E(¥ p ) contains a subgroup isomorphic to G for a large density of 
primes p. We say that an integer m is in-smooth for some fixed value of n if all the 
prime divisors of m are less than or equal to n. As mentioned in the introduction, 
for the elliptic curve factoring method, one wants to choose elliptic curves E such 
that |-E(F p )| is smooth for many p. 

The standard heuristic is that the larger the torsion subgroup T of E(Q), the 
greater the probability that |i5(F p )| is smooth. This is because T injects into E(¥ p ) 
for all primes p of good reduction that do not divide |T|, making |i?(F p )| divisible 
by |T|. However, this heuristic is too simplistic, as a curve with smaller -E(Q)tors 
can have much larger torsion over fields of small degree, giving altogether a greater 
probability of |i?(F p )| to be smooth. We give an example of this phenomenon. 

Example 1. One can use [10l Theorem 4.14] (using t = 3) to obtain an elliptic 
curve over Q with torsion Z/6Z © Z/6Z over the field K = 0(^^3,^217) and 
torsion Z/6Z over Q. The curve is: 

E 1 :y 2 ^x 3 ~ 17811145/19683a:- 81827811574/14348907. 

For example, 61, 67, and 73 are primes of good reduction that completely split 
in K, so the complete torsion group of E{K) injects into the finite fields with 61, 
67, and 73 elements. One easily checks that the curve has 72 points over all the 
fields and that the groups are isomorphic to Z/6Z© Z/12Z. Now take 

E 2 :y 2 = x 3 - 25081083a; + 44503996374. 

The torsion of E 2 (Q) is isomorphic to Z/7Z, implying that by standard heuris- 
tics (examining only the rational torsion), jii^Fp)! should be more often smooth 
than |£i(Fp)|. Note that both curves have rank 1 over Q, so the rank should not 
play a role. 

We examine how often |£i(Fp)| and |i?2(F p )| are 100-smooth and 200-smooth 
if p runs through the first 1000, 10000, and 100000 primes, excluding the first ten 
primes to get rid of the primes of bad reduction. For comparison, we also take the 
elliptic curve 

E 3 : y 2 = x 3 + 3, 

with trivial torsion group and rank 1. In the following table, p n denotes the n-th 
prime number. 



30 < p < pioio 30 < p < piooio 30 < p < pioooio 



#100-smooth |£i(F p )| 


812 


4843 


22872 


#100-smooth \E 2 {F P )\ 


768 


4302 


20379 


#100-smooth \E 3 (¥ p )\ 


553 


2851 


12344 


#200-smooth \Ei(F p )\ 


903 


6216 


35036 


#200-smooth \E 2 (¥ p )\ 


877 


5690 


32000 


#200-smooth \E 3 (¥ P )\ 


699 


4134 


21221 


We see that, contrary to what 


one would 


expect if examining 


only the rational 



torsion, E\ is consistently more likely to be smooth than E 2 ■ Why does this happen? 
Examine the behavior of the torsion of E\ (K) and E 2 (K) as K varies through all 
quadratic fields. The torsion of E 2 {K) will always be Z/7Z (see [7j Theorem 2]), 
while ^i(Q(v /z 3))tor S ^ Z/3Z© Z/6Z and Si(Q( v / 217))tors ^ Z/2Z© Z/6Z. One 
fourth of the primes will split in Q(\/— 3) and not in Q(v / 217), one fourth vice versa, 
one fourth will split in neither field, and one fourth will split in both fields (and 
thus splitting completely in Q(s/— 3, %/217)). This implies that |i?i(F p )| is divisible 
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by 6, 12, 18, and 36, each for one fourth of the primes, while all we can say for 
|^2 (F p ) | is that it is divisible by 7. We also see that |i?3(F p )| is much less likely to 
be smooth than both E\ and 

Note that these curves are by no means special; a similar result will be obtained 
if one chooses three other elliptic curves defined over Q of the same type, one with 
torsion Z/6Z © Z/6Z over a quartic field, one with torsion Z/7Z over Q, and one 
with trivial torsion over the rationals. 

6. Examples of curves with prescribed torsion 

The tables are arranged as follows. In the first column we give a pair (m,n), 
meaning that the given elliptic curve has torsion isomorphic to Z/mZ © Z/nZ. 
In Table [TJ the second column contains a squarefree integer d indicating the base 
field Q(Vd). In all other tables, the second column contains an irreducible poly- 
nomial / g Q[a;] defining the base field, and w denotes a root of /. The curve is 
given in the third column, either by a quintuple (01,02,03,04,06) representing a 
curve in long Weierstrass form or by a pair (a, b) representing a curve in Tate form 
y 2 + axy + by = x 3 + bx 2 . 

Table 1. Curves with prescribed torsion and rank over qua- 
dratic fields. 



(to, n) 


d 


Curve 


(1,1) 


-1 


(0,0,0,0,6) 


(1,2) 


5 


(0,0,0,1,0) 


(1,3) 


-2 


(0,0,0,0,4) 


(1,4) 


-2 


M) 


(1,5) 


-1 


(-2,-3) 


(1,6) 


-1 


(-2,-12) 


(1,7) 


-1 


(-1,2) 


(1,8) 


-2 


(7,-6) 


(1,9) 


-2 


(3,6) 


(1,10) 


-2 


(-5,-24) 


(1,11) 


2 


(v / 2 + l,- x /2 + 2) 


(1,12) 


-3 


(43,-210) 


(1,13) 


17 


(2^/17-9,18^/17- 74) 


(1,14) 


-7 


(7=7 + 2,7=7 + 5) 


(1,15) 


5 


(3,2) 


(1,16) 


70 


/ 31 18 1 
^ 5 ' 25 > 


(1,18) 


33 


(6 + 733, -5 - V33) 


(2,2) 


-1 


(0,0,0,1,0) 


(2,4) 


-3 


(I'll) 


(2,6) 


-3 


111 9 ^ 

v 10' 100 / 


(2,8) 


-3 


( 23 30) 
\ 7 ' 49 > 


(2,10) 


-2 


V 2 ' 2> 


(2,12) 


6 


,-29 50 \ 
I 27' 729 ^ 


(3,3) 


-3 


(1,-1,0,12,8) 


(3,6) 


-3 


(9 JL) 

V8' 64- 1 


(4,4) 


-1 


(1 -^-) 

V- 1 -, 256 > 
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Table 2. Curves with prescribed torsion and rank over cubic fields. 



(m, n) 


/ 


Curve 


(1 


1) 


x 3 + x 2 + 2 


(0,0,0,0,-3) 


(1 


2) 


x 3 + x 2 + 10 


(0,0,0,1,0) 


(1 


3) 


™3 i ™2 i „ — i 

<-C' | iA/ | it' -L. 


(0 4) 

\ ) u i u ? u i 


(1 


4) 


X 3 + X 2 — 1 


(1 il 


(1 


5) 


X 3 + X+l 


(-2,-3) 


(1 


6) 


x 3 + 2 


C- -) 

V 3 ' 9 ' 


(1 


7) 


X 3 + X + 1 


(-1,-4) 


(1 


8) 


x 3 + 2x 2 + 1 


(-i-3) 


(1 


9) 


x 3 + 2x 2 + 1 


(-3,-12) 


(1 


10) 


x 3 + x 2 + 3 


(-5,-24) 


(1 


11) 


x 3 - x 2 - 2 


(-2w 2 + 2w + 3, 2w 2 - 2w - 2) 


(1 


12) 


x 3 + 2 


(43,-210) 


[i 


1 Q\ 

lo J 


x 3 - x - 2 


(— w 2 — w — 1, — w 2 + li! + 2) 


(1 


14) 


x 3 - x - 2 


(-1,-4) 


(1 


15) 


x 3 + 2x - 1 


/lo 2 -2w+3 -2u> 2 -u>+l\ 
V 2 ' 2 ) 


(1 


16) 


x 3 - x 2 + 2x + 8 


{-Aw - 5,-7w 2 - 3w+ 10) 


(1 


18) 


x 3 + 3x - 2 


(-3,-12) 


(1 


20) 


x 3 - x 2 - 2x - 2 


(- 5w 2 2 ^, 14w; 2 12to 8) 


(2 


2) 


x 3 + 2 


(0,0,0,-1,0) 


(2 


4) 


x 3 + 2 


(1.-3) 


(2 


6) 


x 3 + 2 


C 5 3 \ 
V2' 4/ 


(2 


8) 


x 3 + 2 


(¥--i5) 


(2 


10) 


x 3 - x 2 - 1 


(-5w 2 - 3io - 3, -5w 2 - 3w - 4) 


( 2 


12) 


x 3 - 2x - 2 


n2«, 2 +24«)+17 -309tu 2 -546«,-348 N | 
V 2 ' 4 I 


(2 


14) 


x 3 + 2x 2 - 9x - 2 


(3w 2 - 7w - 1, -55w 2 + 115u) + 26) 
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Table 3. Curves with prescribed torsion and rank over quartic fields. 



(to, n) 


/ 


Curve 




(I I) 

\ ± j x / 


x 4 + 8x 2 4- 4 


(0 6) 




(I 2) 


x 4 + 3x 2 + 1 


(0 1 0) 




(1,3) 


x 4 - 2x 2 + 4 


(0,0,0,0,4) 




(1,4) 


x 4 - 3x 2 + 4 


(1,-2) 




(1 5) 


x 4 + 3x 2 + 1 


f-2 -3) 






x 4 + 3x 2 + 1 


f-2 -12) 




(1,7) 


x 4 - 3a; 2 + 4 


(-1,-4) 




(1,8) 


x 4 + 26x 2 + 49 


(7,-6) 




(1,9) 


x 4 - 7x 2 + 4 


(3,6) 




(1,10) 


x 4 - x 2 + 1 


(-5,-24) 




(1,11) 


.x 4 + 2x 2 + 4 


(-w 3 - l,-3w 3 - 8) 




(1,12) 


x 4 - x 2 + 1 


(43,-210) 




(1,13) 


x 4 - 38x 2 + 225 


/u; 3 -53w-135 3u> 3 -159«,- 


370 \ 




/ 


(1,14) 


x 4 - 3x 2 + 4 


{-2w 2 + 5, -2w; 2 + 8) 




(1,15) 


x 4 - x 2 + 4 


(3,2) 




(1,16) 


x 4 + 9x 2 + 9 


(7 12\ 

\ 5 , 25 / 




(1,17) 


x 4 — x 3 + x 2 — 5x — 4 


|'5tu 3 -12tu 2 +9tu-40 1^,3 


+ 2w 2 - lOw + 12) 


(1,18) 


x 4 + 17x 2 + 64 


(2w 2 + 23, -2w 2 - 22) 




(1,20) 


x 4 - 2x 3 + x 2 + 2 


(-5,-24) 




(1,21) 


x 4 - x 3 + 2x - 8 


/ -ui 3 -6tu 2 -26tu+80 -53m, 


5 + 118™ 2 -154w+20(A 


V 8 ' 


2 / 


(1,22) 


x 4 - 2x 3 - x 2 + 2x + 8 


fu, 3 -12u, 2 +31t«-20 9 3 
V 8 ' 


13w 2 + 18w - 4) 


(1, 24) 


x 4 - 18x 2 - 15 


fl ^) 




(2,2) 


x 4 + 3x 2 + 1 


(0,0,0, 1,0) 




(2,4) 


x 4 - 3x 2 + 4 


(1,t«) 

V ' 18' 




(2,6) 


x 4 + 2x 2 + 4 


(5 3} 

v 2 ' 4/ 




(2,8) 


x 4 + 6x 2 + 4 


(-1,-10) 




(2, 10) 


x 4 + 18x 2 + 25 


(—- —-"i 

\ 2 ' 2 ' 




(2,12) 


x 4 + 9x 2 + 9 


a 

v ' 3/ 




(2,14) 


x 4 - x 3 + 3x 2 + 3x + 2 


(w 3 -2w 2 +3w + 3,w 3 


- 2w 2 + 3w + 6) 


(2,16) 


x 4 + 2002x 2 + 116281 


f 2329 366 ^ 
V2695' 2401/ 




(2,18) 


x 4 - x 2 - 8 


(2w 2 + 5, -2w; 2 - 4) 




(3,3) 


x 4 - x 2 + 4 


(1,-1,0,12,8) 




(3,6) 


x 4 - x 2 + 4 


(9 J.) 

v 8 ' 64 / 




(3,9) 


x 4 + 294x 2 + 2601 


fll«> 2 + 129 269m> 2 +2463\ 
V 24 ' 24 ) 




(4,4) 


x 4 + l 


(1.5) 




(4,8) 


x 4 + 541x 2 + 72900 


f431 259 ^ 
V690' 529/ 




(5,5) 


x 4 + x 3 + x 2 + X + 1 


(-10,-11) 




(6,6) 


x 4 + 5x 2 + 1 


/9 7 ^ 
V8' 64/ 





Table 4. Curves with prescribed torsion and positive rank over quadratic fields. 



(m, n) f or d 



Ci 



Independent points of infinite order 



3 
> 

c 



(1,15) 
(1,18) 
(2,10) 



x — x 

^,2 



163x + 12 
55325286553 



(2,12) 2947271015 



( 10m +493 10tu+45 ^ 

V 448 ' 448 ) 

f 25105tu+2071 634768555m+46752805 \ 

V 216 ' 7776 / 
^ 100 1 ! r..t Ui.vi:t Ivij.s 



87419475 ' 

' 1024873209359 
. 27734204981 ' 



87419475 / 

543206429719981170 > 
2187369012646489 / 



-w-274 -2455mj-20382> 



V 3584 ' 200704 J 
f 3673«>+223 150110959^ + 11056609 

V 486 ' 8748 /' V 6 
/ 76249664 3294239461376 \ / 1378903694270734 

V 9062625 ' 55961709375 /> V 



112579tu-8293 -3011095399m>-221775913 > 



' 288 
233856747339051186962702 - 



9062625 ' 559617(19375 /' V 47323818070815 ' 6331823076742017702705 
317897024 54763043233792 \ / 10158696384 66880771114752 \ 
1 >■> \ 631362875 ' 779733150625 ' 



V 55559933 ' 340843520975 

rank > 4, see El 



Table 5. Curves with prescribed torsion and positive rank over cubic fields. 



a 



H 
X 

-J 

H 
sr. 
C. 

3 

M 

o 

H 
C 
M 

rx 

c 
•z 

c 
< 

M 

a 

a 
s 

cd 
M 

3 



H 

a 



(m, n) 


/ 






(1,11) 


X 3 


-x 2 - 


12 


(1,13) 


X 3 


-x 2 - 


2a; -24 


(1,15) 


X 3 


+ x 2 - 


2a; - 6 


(1,16) 


X 3 


-5a; 2 - 


f 8 


(1,20) 


X 3 


- YIx- 


- 6 


(2,10) 


X 3 


-x 2 - 


3 


(2,12) 


X 3 


- x 2 + 


x- 16 


(2,14) 


X 3 


-x 2 - 


166a; — 536 



Independent points of infinite order 



' -3ur+3t»-8 

4 ' 
' -w 2 -3tu+3 



-3w 2 + 3w 

-5w 2 — bw—U\ 



12) 



(2w 2 - 2w, 3w 2 + I5w - 30), (Aw 2 + 6w + 14, 



-29m -35t»-116> 



V 3 ' 3 ) 
( 7m 2 +20m-58 7tu 2 +20tt>-66 'i 
l 8 ' 8 I 

( - w - 2w+2 ,-4w 2 -W + 4) 

f 3m 2 -3m-118 75m 2 + 114m-1872 'i 

V 80 ' 320 / 
5tu 2 +2tu-l -42tu 2 -42tu-81' l 



12m^ + 10tu+30 20tu 2 +88w+516 \ 
9 ' 27 / 

2 _i_ 4^ _ 24 21m 2 + 108^^^-270 ^ 



-62tu-296 8039tu -3000t«-13896> 



( 

(1, 



5 1 25 J 

532m 2 +27560m- 106048 \ 
88209 I 
7tu 2 + 108w+322 -631tu 2 -8667tu-22964 ^ 
26 ' 169 j 



(pw 

}vT3w 
( ii ! 

f 9w 2 -3w + 18 30to 2 +6tu+27 \ 

V 5 ' 5 / 
/ 38m 2 -10m+512 1566m 2 +2810u> + 7264 \ 

V 243 ' 6561 / 

( 315061m 2 +4358637w + 11743820 -289420914m 2 -3975201306m- 10528526328 ~> 

V 3237013 ' 42081169 J 



2 ' 2 

21tti 2 -33m+522 351t» 2 +414m-8316 ^ 
' 1280 i 



Table 6. Curves with prescribed torsion and positive rank over quartic fields. 



(to, n) 


/ 


(1,17) 


x' 


(1,21) 


x' 


(3,9) 


x' 


(4,8) 


x' 


(5,5) 


x' 



Curve 



Independent points of infinite order 



2x 3 + 2x 2 + 2x - 
x 3 - 2x 2 + 10.x - 
2x 2 +4 
3x 2 +4 

x 3 + x 2 + x + 1 



(-w 3 + w 2 +2w-l, 3u> 3 - 6w 2 -2w + 6) 

( -2tu 3 +7tu 2 -23-uj + 17 -135m 3 +440tt) 2 -715m+246 \ 
V 7 ' 7 J 

5w 2 + 8w - 3, 28u; 3 - 59w 2 + 32w + 20) 



(w 

17 

2 

(_§& 181 \ 
\ 93' 93 I 



(¥,-15) 



(-w 3 + 2w 2 +2w-2, 2w 3 - Aw 2 - Aw + 4) 

/ 8m 3 -23tu 2 +35«>-4 -190m 3 +610m 2 -984tt>+316 \ 

V 7 ' 7 I 

{-w 2 + 4w - 4, 32w 3 - 32w 2 - 52w + 96) 

(5 25mi 2 -50 ' | 

V 2 ' 4 I 

(1 1) 
^3' 3^ 
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